A Personal Information Impact Assessment (PIIA) under POPIA is a process that helps organisations understand and mitigate the data protection risks to data subjects associated with processing personal information. Under South Africa’s Protection of Personal Information Act, 4 of [...]
What is cybersecurity compliance mapping? Navigating cybersecurity compliance today is like conducting a precise archaeological dig: you must carefully uncover each layer of obligations without damaging your organisation's underlying structure. Each jurisdiction, sector, and obligation presents distinct challenges, demanding meticulous [...]
We've all got that chaotic drawer at home — a messy collection of old chargers, mystery keys, forgotten receipts, and batteries that may or may not work. While such clutter at home might only cause mild frustration, allowing your business [...]
Imagine your business as a body, thriving and responding to opportunities, with your digital systems acting as its nervous system. Just as any impairment to nerves can paralyse a body, a cybersecurity breach can disrupt or incapacitate your organisation. Cybersecurity [...]
Artificial Intelligence (AI) has rapidly become an essential technology for businesses, but it has also raised serious concerns about ethics, privacy, and safety. Recently, a proposed "American moratorium on AI" aimed to temporarily stop states in the US from creating [...]
The Northbound Processing v SA Diamond Regulator case highlights the risks of citing AI-generated case law in South African courts. It concerns the urgent release of a refining licence linked to a disputed business sale and highlights the consequences of [...]
Photography law and photo rights have become a big deal and very topical. Almost everyone has a camera in their pocket all the time and most can take videos as well. People take and share more photos now, than [...]
Zimbabwe’s Cyber and Data Protection Act clearly sets out how organisations must collect, use, and protect personal information. Alongside the Cyber and Data Protection (Licensing of Data Controllers and Appointment of Data Protection Officers) Regulations, it forms a comprehensive legal [...]
The 23andMe data breach exposed highly sensitive personal and genetic information. Canadian and UK regulators found that 23andMe failed to implement adequate security measures and violated their respective data protection laws. This breach highlights how poor security and slow response [...]
In Inzalo v Chief Albert Luthuli Municipality, the court examined disputes over public procurement, contractual obligations, and alleged unlawful enrichment in the context of data ownership. This case offers a key lesson that you must be able to analyse and […]
Lawyers must use AI professionally to preserve the doctrine of precedent. There are a number of globally reported incidents (like fake case-law citations in the UK) illustrating where lawyers have failed to use AI professionally with significant consequences. There is [...]
Managing data effectively in any organisation can feel like navigating an intricate roundabout without clear signage — a confusing, inefficient, and costly process prone to mistakes. Poor data quality can significantly impact your organisation's decision-making capabilities, resulting in operational inefficiencies, [...]
